CVEvulnerability
CVE-2012-4415
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-10-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the guac_client_plugin_open function in libguac in Guacamole before 0.6.3 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long protocol name.
Affected configurations
• fedoraproject fedora 16
• fedoraproject fedora 17
• guac-dev guacamole (<= 0.6.2)
• guac-dev guacamole 0.5.0
• guac-dev guacamole 0.6.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0107.html Exploit
- http://guac-dev.org/trac/changeset/7dcefa744b4a38825619c00ae8b47e5bae6e38c0/libguac Patch
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088031.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088218.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088272.html lists.fedoraproject.org
- http://www.openwall.com/lists/oss-security/2012/09/11/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/11/7 www.openwall.com
- http://www.securityfocus.com/bid/55497 Exploit
- https://bugzilla.redhat.com/show_bug.cgi?id=856743 bugzilla.redhat.com
- http://archives.neohapsis.com/archives/bugtraq/2012-09/0107.html Exploit
- http://guac-dev.org/trac/changeset/7dcefa744b4a38825619c00ae8b47e5bae6e38c0/libguac Patch
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088031.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088218.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2012-September/088272.html lists.fedoraproject.org
- http://www.openwall.com/lists/oss-security/2012/09/11/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/09/11/7 www.openwall.com
- http://www.securityfocus.com/bid/55497 Exploit
- https://bugzilla.redhat.com/show_bug.cgi?id=856743 bugzilla.redhat.com